Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32362e302f32332d3234203d3e20323638383739.roa
File:                     34352e3137352e32362e302f32332d3234203d3e20323638383739.roa (raw, json)
Hash identifier:          KY4G1q4kDwgUSZwyPbeDA+2mjxdpYh2W5FKZVYiacC8=
Subject key identifier:   6E:E6:66:30:4C:A7:A1:C0:52:CA:84:87:44:81:0E:4F:EA:9D:3D:11
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       62F5E10735640DFF1B881238CD6043A0F434A66F
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32362e302f32332d3234203d3e20323638383739.roa
Signing time:             Thu 06 Mar 2025 07:00:22 +0000
ROA not before:           Thu 06 Mar 2025 06:55:22 +0000
ROA not after:            Thu 05 Mar 2026 07:00:22 +0000
asID:                     268879
IP address blocks:        45.175.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f5:e1:07:35:64:0d:ff:1b:88:12:38:cd:60:43:a0:f4:34:a6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Mar  6 06:55:22 2025 GMT
            Not After : Mar  5 07:00:22 2026 GMT
        Subject: CN=6EE666304CA7A1C052CA848744810E4FEA9D3D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:a3:9d:96:17:15:fe:32:9e:77:f6:3a:cd:
                    e9:54:dd:a6:28:47:43:e1:99:67:db:85:9c:df:07:
                    66:eb:6a:46:88:69:89:97:34:16:ec:59:2a:59:fa:
                    cf:d0:5f:10:be:47:8e:bb:33:86:a6:4b:b3:77:bb:
                    05:9a:22:21:9b:8e:0a:57:5b:22:fe:1d:3b:a5:48:
                    9b:d8:af:a5:30:3f:9b:fe:03:ee:96:d7:7e:90:09:
                    10:4d:43:2b:f5:52:57:88:87:b6:70:17:34:b8:2c:
                    76:42:85:54:fc:7a:9a:b1:32:42:3c:c5:d8:d5:f8:
                    92:6d:a3:8f:c5:26:b9:5f:98:0f:3b:4b:6b:48:72:
                    aa:4b:f1:e8:58:d9:69:63:35:86:bf:87:dc:41:1e:
                    32:bd:17:d7:6b:22:c0:96:29:8c:f0:99:a1:41:0a:
                    ae:89:32:e5:27:56:65:2d:9a:f8:f6:cf:cf:a9:c1:
                    fa:5f:8b:c5:87:f0:7d:c8:6b:78:98:24:ad:33:be:
                    cf:7b:0f:1d:4b:fc:b8:01:8c:d7:9a:fa:3e:7e:ef:
                    48:49:e9:84:e7:a9:1c:70:1c:0f:3e:5b:10:78:b2:
                    1a:23:0b:5b:88:f6:12:cc:99:23:83:93:ce:4f:a7:
                    fb:23:57:a5:fe:d7:68:06:e8:9c:46:ca:f0:ab:93:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E6:66:30:4C:A7:A1:C0:52:CA:84:87:44:81:0E:4F:EA:9D:3D:11
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32362e302f32332d3234203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:28:c5:f3:1b:00:83:e8:59:78:24:f4:67:87:1b:da:67:40:
         4e:30:71:fb:38:f3:2a:0f:ac:b9:01:18:52:5c:33:02:00:bd:
         72:eb:df:d2:ee:21:53:9e:fb:89:78:e8:b2:b4:20:03:93:e6:
         95:c5:9c:fd:98:d4:e5:c9:87:a7:79:95:51:2f:55:9f:29:8b:
         9f:28:d0:ab:f1:9d:b0:62:20:78:45:f1:ea:27:5f:17:34:de:
         4f:ca:89:81:b5:4f:6b:93:43:3a:78:ad:c3:17:51:4f:a1:d5:
         6d:eb:17:98:86:23:c6:29:42:c5:f5:cd:93:01:cd:a5:3d:36:
         9e:66:20:23:4a:b5:73:4d:56:c1:1e:8c:e8:57:0c:12:39:9a:
         ec:4f:cd:51:3d:44:28:bd:38:70:48:e3:c9:d5:2f:ed:1d:c0:
         ce:15:1d:0a:65:72:42:be:2b:c4:81:ac:d9:85:7f:84:b8:be:
         b2:bd:dc:ec:e8:b6:03:4b:5d:55:e1:8e:31:25:c7:fb:dd:ff:
         d6:94:64:95:fc:d0:e3:2d:5d:da:0e:81:d7:49:65:a1:33:5e:
         6d:ad:5c:45:25:6e:5c:43:ac:16:d8:f0:63:54:4c:31:b6:b7:
         7b:6d:3f:d0:cc:b8:56:29:1d:a5:dd:57:2e:6e:ad:c5:81:4e:
         51:35:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:22:44 2025 by rpki-client